Security audit

Web scraping skill using Chrome + WebMCP

Security checks across malware telemetry and agentic risk

Overview

This is a real web-scraping skill, but it asks the agent to control the user's host Chrome browser and close tabs, so it needs review before installation.

Install only if you are comfortable letting the agent use your real Chrome session for scraping. Prefer a separate browser profile or sandbox, avoid logged-in or private pages unless intentional, and save or separate important tabs because the skill instructs the agent to close tabs during cleanup.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger phrases are very broad and map common requests like "search xxx" or "查一下xxx" directly to Chrome-based scraping. This can cause the agent to invoke a powerful browser-automation skill for ordinary user queries, increasing the chance of unintended navigation, data access, or interaction with live sites without clear user intent.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill mandates browser automation on the host and aggressive cleanup that closes tabs, but it does not present a clear user-facing warning about these side effects. In practice, this can disrupt unrelated browser sessions, destroy user state in open tabs, and create privacy or integrity issues because the skill operates in a real host browser context.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.